🚨 BREAKING: ETHERSPHERE HIT BY A MAJOR SUPPLY-CHAIN ATTACK. Hackers compromised Ethersphere's official software distribution pipeline, pushing malicious code through its "bee-js" npm package (v13.3.0) and Swarm Desktop (v0.56.2). The malware was designed to extract encrypted Ethereum wallet keys and their stored passwords, while installing persistent backdoors across Windows, macOS and Linux. The compromised npm release was available for approximately 75 minutes, while the malicious desktop release remained available for around 8.5 hours. Both releases have since been withdrawn, but removing the affected software alone may not eliminate an infection. Users who installed these versions should treat their machines and accessible credentials as potentially compromised. IMPORTANT: If you use Swarm Desktop, check your installed version immediately. The clean replacement is v0.56.3. Developers should also audit their dependencies for the compromised npm package. One more reminder: even legitimate software, trusted repositories and signed releases are not automatically safe. Protect your wallets. Verify every update. Stay alert. 🚨
NehalShare
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.